Added check if user has perms to remove the post

zaxovaiko · Oct 29, 2023 · 35c4c33 · 35c4c33
1 parent 1c4b9a9
commit 35c4c33
Show file tree

Hide file tree

Showing 4 changed files with 29 additions and 12 deletions.
diff --git a/schema.ts b/schema.ts
@@ -137,12 +137,12 @@ const schema = buildSchema(`
   }
 
   type Query {
-    currentUser: User
-    user(input: UserInput!): User
+    currentUser: User!
+    user(input: UserInput!): User!
     users(input: PaginationInput): UserConnection!
     posts(input: PaginationInput): PostConnection!
     comments(input: PaginationInput): CommentConnection!
-    post(input: PostInput!): Post
+    post(input: PostInput!): Post!
   }
 
   type Mutation {

diff --git a/web/graphql/queries/getCurrentUser.graphql b/web/graphql/queries/getCurrentUser.graphql
@@ -0,0 +1,5 @@
+query getCurrentUser {
+  currentUser {
+    id
+  }
+}
diff --git a/web/pages/Profile/PostCard.tsx b/web/pages/Profile/PostCard.tsx
@@ -12,6 +12,7 @@ import { IconTrash } from '@tabler/icons';
 import { Post, PostThumbnailFragment } from 'generated/client';
 import { useRouter } from 'next/router';
 import React, { memo } from 'react';
+import { useCurrentUser } from 'web/shared/hooks/useCurrentUser';
 
 type Props = {
   post: PostThumbnailFragment;
@@ -20,6 +21,8 @@ type Props = {
 
 export const PostCard = memo(({ post, onDelete }: Props) => {
   const { push } = useRouter();
+  const currentUser = useCurrentUser();
+  const isAuthor = currentUser?.id === post.user.id;
 
   return (
     <Card shadow="sm" padding="lg" radius="md" withBorder>
@@ -34,15 +37,14 @@ export const PostCard = memo(({ post, onDelete }: Props) => {
           <Title order={2} fw="bold" weight={500}>
             {post.title}
           </Title>
-          <IconTrash
-            onClick={() => {
-              onDelete(post.id).catch(console.error);
-            }}
-            style={{
-              cursor: 'pointer',
-              marginLeft: 'auto',
-            }}
-          />
+          {isAuthor && (
+            <IconTrash
+              onClick={() => {
+                onDelete(post.id).catch(console.error);
+              }}
+              style={{ cursor: 'pointer', marginLeft: 'auto' }}
+            />
+          )}
         </Flex>
         {post.isDraft && <Badge variant="gradient">Draft</Badge>}
       </Group>

diff --git a/web/shared/hooks/useCurrentUser.ts b/web/shared/hooks/useCurrentUser.ts
@@ -0,0 +1,10 @@
+import { useGetCurrentUserQuery } from 'generated/client';
+
+export const useCurrentUser = () => {
+  const { data } = useGetCurrentUserQuery({
+    fetchPolicy: 'cache-first',
+    nextFetchPolicy: 'cache-first',
+  });
+
+  return data?.currentUser;
+};